>> TAG: #remote exploit

PHPFusion 9.03.50 – Remote Code Execution

WordPress Plugin LifterLMS 4.21.0 – Stored Cross-Site Scripting (XSS)

Postbird 0.8.4 – Javascript Injection

Pluck CMS 4.7.13 – File Upload Remote Code Execution (Authenticated)

Codiad 2.8.4 – Remote Code Execution (Authenticated) (3)

ProFTPd 1.3.5 – ‘mod_copy’ Remote Command Execution (2)

RarmaRadio 2.72.8 – Denial of Service (PoC)

Gadget Works Online Ordering System 1.0 – ‘Category’ Persistent Cross-Site Scripting (XSS)

WordPress Plugin Cookie Law Bar 1.2.1 – ‘clb_bar_msg’ Stored Cross-Site Scripting (XSS)

DiskBoss Service 12.2.18 – ‘diskbsa.exe’ Unquoted Service Path